mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Set event.dataset for all Kratos logs to 'access' for now
This commit is contained in:
@@ -1,6 +1,7 @@
|
|||||||
{
|
{
|
||||||
"description" : "kratos",
|
"description" : "kratos",
|
||||||
"processors" : [
|
"processors" : [
|
||||||
|
{ "set": { "field": "event.dataset", "value": "access" } },
|
||||||
{ "pipeline": { "name": "common" } }
|
{ "pipeline": { "name": "common" } }
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user